aboutsummaryrefslogtreecommitdiff
path: root/docs/cmdline-opts/ssl-allow-beast.md
blob: 6c144e765fc876a094a05354d2371320a2a1f517 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
---
c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
SPDX-License-Identifier: curl
Long: ssl-allow-beast
Help: Allow security flaw to improve interop
Protocols: TLS
Added: 7.25.0
Category: tls
Multi: boolean
See-also:
  - proxy-ssl-allow-beast
  - insecure
Example:
  - --ssl-allow-beast $URL
---

# `--ssl-allow-beast`

This option tells curl to not work around a security flaw in the SSL3 and
TLS1.0 protocols known as BEAST. If this option is not used, the SSL layer may
use workarounds known to cause interoperability problems with some older SSL
implementations.

**WARNING**: this option loosens the SSL security, and by using this flag you
ask for exactly that.